Firewall not blocking ICMP

[MP715]

I have a firewall rule setup to block all traffic if my VPN tunnel is down. It seems to be working for the most part but ICMP is not blocked. I figured all traffic would be blocked. I'm not specifying any protocols, but I did create a test rule blocking ICMP and it still wasn't blocked. Is this normal behavior?

[jcoffin]

I have a firewall rule setup to block all traffic if my VPN tunnel is down. It seems to be working for the most part but ICMP is not blocked. Is this normal behavior?

https://forums.untangle.com/ng-firewall-general/45189-icmp-bypassed-default.html#post255093

[MP715]

I have a firewall rule setup to block all traffic if my VPN tunnel is down. It seems to be working for the most part but ICMP is not blocked. Is this normal behavior?

https://forums.untangle.com/ng-firew...tml#post255093

Got it. Thanks for your reply. I'm really bad at searching the forums before posting! So, I should have used Filter Rules all along and no longer need those firewall rules above? It's working great!

[gravenscroft]

…I should have used Filter Rules all along and no longer need those firewall rules above?

I recommend comparing the conditions available in Filter Rules with those available to the Firewall app. If a rule can be created in Filter Rules, it should be. They're best at blocking any layer-3 attributes: IP addresses, interfaces, &c. ('Anything based on a number', I usually say.)

In most cases, the Firewall app is used for:

• geo-IP blocking, used to block traffic to or from whole countries
• username-based blocking, including blocking based on AD groups